Module1

Question 1

What are the benefits of Security?

Answer 1

• Protects against external and internal threats
• Meets regulatory compliance (laws & guidelines)
• Maintains and improves business productivity
• Reduces expenses associated with risk
• Maintains brand trust

Question 2

What is a “Threat Actor”?

Answer 2

Any person or group who presents a security risk.

Question 3

What is Cybersecurity?

Answer 3

The practice of ensuring confidentiality, integrity, and availability of information by protecting networks, devices, people, and data from unauthorised access or criminal exploitation.

Question 4

What do security analysts do?

Answer 4

Security analysts are responsible for monitoring and protecting information and systems.

Question 5

What is “compliance”?

Answer 5

The process of adhering to internal standards and external regulations.

Question 6

What are “Security Frameworks”?

Answer 6

Guidelines used for building plans to help mitigate risks and threats to data and privacy

Question 7

What are “Security Controls”?

Answer 7

Safeguards designed to reduce specific security risks. Used within security frameworks to establish a strong security posture.

Question 8

What is “Security Posture”?

Answer 8

An organisation’s ability to manage its defence of critical assets and data and react to change.

NOTE: Strong security posture = lower risk for the organization.

Question 9

What is “Network Security “?

Answer 9

The practice of keeping an organisation’s network infrastructure secure from unauthorised access.

Question 10

What is “Cloud Security”?

Answer 10

The process of ensuring that assets stored in the cloud are properly configured or set up correctly and access to those assets is limited to authorised users.

Question 11

What is “The Cloud”?

Answer 11

A network made up of a collection of servers or computers that store resources and data in remote physical locations (data centres) that can be accessed via the Internet.

Question 12

What is an external threat?

Answer 12

Someone outside of an organisation trying to gain access to private networks, information, or devices.

Question 13

What is an internal threat?

Answer 13

Current or former employees, trusted partners, or external vendors.

Question 14

What are the responsibilities of a Security Analyst?

Answer 14

• Protecting computer and network systems
• Installing prevention software
• Conducting periodic security audits

Question 15

What does SIEM stand for?

Answer 15

Security Information & Event Management

Question 16

What do digital forensics investigators do?

Answer 16

Attempt to identify, analyse, and preserve criminal evidence within networks, computers, and electronic devices

Question 17

What does PII stand for?

Answer 17

Personally Identifiable Information

Question 18

What does SPII stand for?

Answer 18

Sensitive Personally Identifiable Information

Question 19

What is an example of PII?

Answer 19

Email address
Date of birth
Phone number
Home address
IP address
Physical address

Question 20

What is an example of SPII?

Answer 20

Medical information
Financial information
Biometric data
Social security numbers

Question 21

What is “Identity Theft”?

Answer 21

The act of stealing personal information to commit fraud while impersonating the victim.

Question 22

What is the primary objective of Identity Theft?

Answer 22

Financial gain

Question 23

What is programming?

Answer 23

A process that can be used to create a specific set of instructions for a computer to execute tasks.

Question 24

What is a security audit?

Answer 24

A review of an organisation’s security records, activities, and other related documents.

Question 25

What does Network Security cover?

Answer 25

Data, services, systems, and devices that are stored in an organisation’s network.